A local account without Gitea connection was seeing all Gitea repos because the endpoint used the module-level gitea client (global admin token). Now it checks get_user_gitea_client(request) and returns empty gitea_repos if the user has no OAuth token for Gitea.